-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi,
unbound 1.4.12 is here, with two moderate serious bugfixes. http://www.unbound.net/downloads/unbound-1.4.12.tar.gz sha1: c46c05d1fa2402a59c10f51864fd4c62d10a472f sha256: d7f0ee340b8a62e3fe02e505fdf6f2e4742ae7eaf8fd1da200fb38c4947e2d66 It has the ldns tarball removed from the unbound tarball. If you used - --with-ldns-builtin, you have to change your buildscripts, and use a proper dependency on ldns. (with --with-ldns=path you can use ldns installed in a different location if necessary, e.g. due to different libcrypto used, for home-users: --with-ldns=compile-dir-of-ldns works too pointed at the build-dir of ldns). The ID leak found by Jinmei Tatuya can leak the id bits of a previous query in specially-crafted acl-REFUSED queries. The previous portnumber or queryname is not leaked. The replyaddr count bug was reported by Robert Fleischman, it can cause unbound to stop responding to non-cached queries, but only after dropping and jostling thousands of queries. Bug Fixes * removed ldns-src tarball inside the unbound tarball. * [bugzilla: 395 ] fix that id bits of other query may leak out under conditions * fix replyaddr count wrong after jostled queries, which leads to eventual starvation where the daemon has no replyaddrs left to use. * fix that the listening socket is not closed when too many remote control connections are made at the same time. * version number in example config file. * fix that --enable-static-exe does not complain about it unknown. * iana portlist updated Best regards, Wouter -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/ iQIcBAEBAgAGBQJOHrB3AAoJEJ9vHC1+BF+Nq9sP/3ZPS5VkJX2X6mGYyKoM1qAN 7H+1N97+LpakW/TN2QwHfHgX06aen9dW4P7UQMN//ug2iRr5xoYQ/eMH/vzrxGnU tHsGk3ZLjudT3y0hT9MxVdOYTASIX3dB6TYXFyYF30gXSS7FgJOFKICWtot8PWwP W6S8FQr6IPqajfxz/+OtEV8U72oeJ3sdjiiEhWn4pBHYvM28AwKFC6iLg+gwMXz8 HHzkS5gUn9lwHs8+fPT5S/e0ucMatNaU5FP5rhT12QRWPTLKc/TVqGcewOT81DhP gBlRcKXiNslR+pbPy+wy05bCPeo3SpBOITThqS/jblgdRpmhh8hLBSpF6UrgdndN l1wokz9TzI1WE4X3sxEy5Wh0nFJrLjOxX4jmOry6kV2hTyeKeZYxnb2r/i6YjrW+ xNU055dOPt7hrsOkWHstRWXQEjw72O3xnaTrIW8ASAisPS6CbNUTNc4G0YFVhCzp rLDzWf4u9C5sMfr6VXiUKVhvRwai0D71j1y/J9kh3g0bsDLR86iw1Olf46B2G3/C V/GTx2JDrPArptcMbqeg3iE71ThtJu2vou6qzjNByID6QlVy30hi2TMPCmtC7YKN yKPDnEYA4/q+w65wJ5Eiiw7k7wFSToxB0hfLeJQhNRsoy33gREJu3hQZq2gDI5wx hryFpKtWfQN56BEbjkq2 =sLik -----END PGP SIGNATURE----- _______________________________________________ Unbound-users mailing list [email protected] http://unbound.nlnetlabs.nl/mailman/listinfo/unbound-users
